Static task
static1
Behavioral task
behavioral1
Sample
0ec04a398c993734d2a3204eb9a954ee8e49e8995b83c6291af5d910df9f0346.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0ec04a398c993734d2a3204eb9a954ee8e49e8995b83c6291af5d910df9f0346.exe
Resource
win10v2004-20221111-en
General
-
Target
0ec04a398c993734d2a3204eb9a954ee8e49e8995b83c6291af5d910df9f0346
-
Size
344KB
-
MD5
c6a3d17a3ba5392ece86e5153387ce35
-
SHA1
acdbbb2a6b66bddc635401b992562b4cb5edaee6
-
SHA256
0ec04a398c993734d2a3204eb9a954ee8e49e8995b83c6291af5d910df9f0346
-
SHA512
fa6506393a63fd239ab2c518c3bf85f5490e6caf665d27b392fe6387fb8c2761ebfc5ce29e84a251627d6d74252df56a1326c70faac61d5970df1d4c9cf1d895
-
SSDEEP
6144:i2KMhqnl9vF7bfsW65OjuqdoC4vdwfy9VtvuIJ8pBPI6bFXzW0:Bgl37bHq6oC4vKfyDlj8Q6bFD
Malware Config
Signatures
Files
-
0ec04a398c993734d2a3204eb9a954ee8e49e8995b83c6291af5d910df9f0346.exe windows x86
e30b8fa3c712bd693bc9585a97277601
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
GetNamedSecurityInfoA
RegRestoreKeyA
ControlService
LookupAccountSidA
AdjustTokenPrivileges
InitializeSid
CryptHashData
RegUnLoadKeyW
SetSecurityDescriptorOwner
RegisterServiceCtrlHandlerA
SetSecurityDescriptorControl
CryptGetHashParam
RegSetValueA
CryptGenKey
GetSidSubAuthority
LsaOpenPolicy
GetSidLengthRequired
CreateWellKnownSid
RegCreateKeyExW
OpenThreadToken
EnumServicesStatusA
CryptGetUserKey
LsaLookupNames
RegEnumValueW
SetServiceStatus
AllocateAndInitializeSid
SetSecurityDescriptorDacl
RegQueryValueExA
RegOpenCurrentUser
DeleteAce
RegSetValueExA
LsaAddAccountRights
CryptDecrypt
GetKernelObjectSecurity
GetSecurityDescriptorDacl
RegEnumKeyW
InitiateSystemShutdownA
OpenSCManagerW
QueryServiceConfigA
SetServiceObjectSecurity
RegDisablePredefinedCache
LookupPrivilegeValueW
StartServiceW
BuildTrusteeWithSidW
QueryServiceLockStatusW
ChangeServiceConfigW
ReadEncryptedFileRaw
LookupAccountNameW
LookupPrivilegeNameA
CryptEncrypt
CryptGenRandom
RegLoadKeyW
LsaRemoveAccountRights
AddAce
MapGenericMask
GetSidSubAuthorityCount
SetNamedSecurityInfoA
WriteEncryptedFileRaw
ConvertSidToStringSidW
SetNamedSecurityInfoW
EqualSid
CreateServiceW
GetFileSecurityW
GetLengthSid
ConvertStringSidToSidW
RegOpenKeyExW
ConvertStringSidToSidA
RevertToSelf
StartServiceCtrlDispatcherW
LsaQueryInformationPolicy
RegSetKeySecurity
RegOpenKeyExA
RegFlushKey
CreateServiceA
RegQueryValueA
ConvertSecurityDescriptorToStringSecurityDescriptorW
GetSecurityDescriptorLength
LogonUserA
RegConnectRegistryW
UnlockServiceDatabase
RegRestoreKeyW
BuildExplicitAccessWithNameW
StartServiceCtrlDispatcherA
CryptAcquireContextA
CopySid
CryptSetProvParam
RegisterEventSourceW
QueryServiceConfigW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegOpenKeyW
ChangeServiceConfig2W
OpenServiceW
LsaClose
RegisterEventSourceA
RegQueryValueW
CloseEncryptedFileRaw
GetTokenInformation
CryptReleaseContext
RegEnumValueA
EqualPrefixSid
QueryServiceStatusEx
IsValidSecurityDescriptor
GetSecurityDescriptorControl
GetAclInformation
CryptEnumProvidersW
RegSetValueExW
LsaNtStatusToWinError
GetSecurityDescriptorSacl
LsaLookupSids
InitializeSecurityDescriptor
EnumDependentServicesW
GetExplicitEntriesFromAclW
RegCreateKeyExA
OpenSCManagerA
GetSecurityInfo
RegNotifyChangeKeyValue
ImpersonateNamedPipeClient
FreeSid
SetFileSecurityA
LookupPrivilegeDisplayNameA
RegUnLoadKeyA
GetNamedSecurityInfoW
ChangeServiceConfigA
SetFileSecurityW
DeregisterEventSource
CloseServiceHandle
RegDeleteKeyW
LockServiceDatabase
ReportEventW
DuplicateTokenEx
RegCloseKey
ReportEventA
ChangeServiceConfig2A
RegEnumKeyExW
IsValidSid
SetSecurityDescriptorSacl
RegDeleteValueW
GetFileSecurityA
CryptDestroyKey
MakeSelfRelativeSD
AddAccessAllowedAce
SetSecurityDescriptorGroup
SetThreadToken
SetTokenInformation
LookupPrivilegeValueA
GetSecurityDescriptorGroup
AccessCheck
RegSaveKeyW
LsaFreeMemory
RegEnumKeyExA
ImpersonateLoggedOnUser
RegCreateKeyA
CryptExportKey
CryptDeriveKey
GetSecurityDescriptorOwner
RegGetKeySecurity
RegQueryInfoKeyA
RegisterServiceCtrlHandlerW
RegDeleteValueA
DuplicateToken
RegQueryInfoKeyW
QueryServiceStatus
RegisterServiceCtrlHandlerExA
EncryptFileW
RegCreateKeyW
OpenServiceA
RegConnectRegistryA
RegOpenKeyA
GetEffectiveRightsFromAclA
GetUserNameA
CryptGetKeyParam
RegDeleteKeyA
OpenProcessToken
CryptCreateHash
GetAce
RegSetValueW
SetEntriesInAclW
SetEntriesInAclA
CreateProcessAsUserW
LookupAccountSidW
CryptDestroyHash
RegEnumKeyA
RegQueryValueExW
CryptAcquireContextW
GetSidIdentifierAuthority
ImpersonateSelf
InitiateSystemShutdownExW
InitializeAcl
CheckTokenMembership
CryptImportKey
SetSecurityInfo
LookupAccountNameA
DeleteService
MakeAbsoluteSD
LogonUserW
CreateProcessAsUserA
CryptVerifySignatureA
OpenEncryptedFileRawW
StartServiceA
GetUserNameW
BuildTrusteeWithNameW
IsValidAcl
RegSaveKeyA
RegLoadKeyA
kernel32
LoadLibraryExA
FindNextVolumeW
GetSystemPowerStatus
GlobalFindAtomA
CreateFileMappingA
SystemTimeToTzSpecificLocalTime
GetThreadPriority
GetCurrentDirectoryW
CreateFileMappingW
WriteConsoleW
_lopen
GetConsoleOutputCP
SwitchToThread
AllocConsole
CopyFileExA
_hwrite
WriteFileEx
Process32FirstW
GetCurrentThread
GetExitCodeThread
ClearCommError
GetSystemTimeAdjustment
QueueUserAPC
DeleteFiber
GlobalDeleteAtom
HeapCompact
GetOverlappedResult
BackupWrite
DeleteAtom
WriteConsoleOutputW
SetCurrentDirectoryA
WriteConsoleA
GetDriveTypeA
GlobalMemoryStatus
SetConsoleCursorPosition
IsBadWritePtr
GetTempPathW
MulDiv
lstrcpyW
GetUserDefaultLCID
SetFileAttributesA
OutputDebugStringA
CreateIoCompletionPort
SetHandleInformation
FindCloseChangeNotification
LoadLibraryA
FormatMessageW
GetFileAttributesExA
CreatePipe
InterlockedIncrement
IsBadStringPtrW
lstrcpyA
SetCommMask
GetPrivateProfileSectionA
WriteProfileStringA
SetLocalTime
OpenFile
MoveFileW
GetCommMask
GetDiskFreeSpaceExW
CreateMutexW
RemoveDirectoryA
GetCPInfoExA
TryEnterCriticalSection
WriteProfileStringW
Process32NextW
OpenFileMappingA
SetProcessWorkingSetSize
lstrcpynW
CreateProcessA
CopyFileExW
WriteProcessMemory
GetConsoleMode
OpenSemaphoreW
CopyFileW
ConvertThreadToFiber
OpenFileMappingW
FindFirstChangeNotificationA
GetTimeFormatW
DosDateTimeToFileTime
FindResourceExA
LockFile
GetVolumeInformationA
GetComputerNameExA
SetThreadLocale
SetThreadAffinityMask
ReadProcessMemory
RemoveDirectoryW
GetTempFileNameA
GetTimeZoneInformation
_lclose
SetEndOfFile
LoadLibraryExW
GetEnvironmentVariableA
EnumResourceLanguagesW
GetFullPathNameA
IsDBCSLeadByte
TlsSetValue
GlobalGetAtomNameA
SetWaitableTimer
GetDriveTypeW
QueryDosDeviceW
DeleteVolumeMountPointW
ExitThread
VirtualFreeEx
Thread32First
FatalAppExitA
LoadLibraryW
GetSystemDirectoryW
GetStringTypeA
UnlockFileEx
GetProcessTimes
IsBadReadPtr
WinExec
SearchPathW
FindVolumeClose
GetModuleHandleA
LocalAlloc
IsDebuggerPresent
EnumCalendarInfoW
SearchPathA
EnumCalendarInfoExW
LocalSize
GetCurrentProcessId
GetShortPathNameW
TlsFree
InterlockedDecrement
GlobalAddAtomA
ReadDirectoryChangesW
GlobalSize
CreateMailslotA
VirtualProtectEx
GetShortPathNameA
CreateMutexA
lstrcatA
FindClose
GetOEMCP
GlobalGetAtomNameW
VerifyVersionInfoA
SleepEx
DeviceIoControl
EscapeCommFunction
GetPrivateProfileStringW
ResetEvent
GetLogicalDrives
VirtualQuery
SetConsoleCtrlHandler
Beep
LocalFileTimeToFileTime
ResumeThread
SetProcessShutdownParameters
VirtualProtect
GetMailslotInfo
WaitNamedPipeW
QueueUserWorkItem
DeleteVolumeMountPointA
DeleteFileW
GetDiskFreeSpaceW
UnhandledExceptionFilter
PulseEvent
GetStringTypeExW
CopyFileA
InterlockedExchangeAdd
GetLogicalDriveStringsW
ContinueDebugEvent
GetComputerNameExW
GetDiskFreeSpaceA
ExpandEnvironmentStringsA
WritePrivateProfileSectionA
SwitchToFiber
GetAtomNameA
GetProfileIntA
GetSystemDirectoryA
IsBadCodePtr
SizeofResource
FindNextFileA
GetPriorityClass
CreateFileA
FindFirstVolumeW
OpenMutexW
FindFirstFileA
CreateFiber
VirtualFree
_lread
GetACP
HeapDestroy
GetPrivateProfileIntA
SetThreadPriority
BeginUpdateResourceW
GetProfileIntW
ExpandEnvironmentStringsW
GetDiskFreeSpaceExA
CreateDirectoryA
CreateNamedPipeW
GetPrivateProfileIntW
TerminateThread
CommConfigDialogW
FindNextFileW
TlsAlloc
Sleep
WritePrivateProfileSectionW
DebugBreak
WriteFile
SetVolumeLabelA
GetThreadContext
WritePrivateProfileStructA
FindNextChangeNotification
EnumResourceLanguagesA
LocalHandle
GetNumberFormatA
GetUserDefaultLangID
OpenProcess
CreateDirectoryExA
EnumResourceNamesA
ExitProcess
SetEnvironmentVariableW
GetPrivateProfileSectionNamesA
GetCommProperties
SetComputerNameW
GetVolumeInformationW
FreeEnvironmentStringsA
MoveFileExW
GetStartupInfoA
SetCommState
SetFileTime
GetCommandLineA
WideCharToMultiByte
GetProcessAffinityMask
SetPriorityClass
HeapFree
LCMapStringW
GetSystemDefaultLCID
CreateSemaphoreA
GetCurrentDirectoryA
GetSystemInfo
UpdateResourceW
CompareStringA
GlobalMemoryStatusEx
InitializeCriticalSectionAndSpinCount
CreateThread
SetEnvironmentVariableA
SetStdHandle
VerSetConditionMask
GetProfileStringW
WritePrivateProfileStringW
OpenThread
GlobalAlloc
UnmapViewOfFile
CreateEventA
EnumResourceNamesW
FreeConsole
WaitForSingleObjectEx
BackupRead
EnterCriticalSection
WritePrivateProfileStructW
DeleteCriticalSection
VirtualLock
MapViewOfFileEx
GetWindowsDirectoryA
LoadResource
HeapAlloc
HeapReAlloc
SuspendThread
FreeResource
VerifyVersionInfoW
GetPrivateProfileStringA
TlsGetValue
RtlFillMemory
GetStringTypeExA
OpenEventW
GetCurrencyFormatA
CreateFileW
LocalFree
GetCommTimeouts
LCMapStringA
PostQueuedCompletionStatus
CreateDirectoryW
GetVolumePathNameA
GetFileAttributesExW
GetVolumeNameForVolumeMountPointW
SetVolumeLabelW
Heap32Next
GlobalUnlock
GetConsoleScreenBufferInfo
DisconnectNamedPipe
GetLocalTime
GetEnvironmentVariableW
SetTimeZoneInformation
GetProcessHeaps
lstrlenA
GetModuleHandleW
Toolhelp32ReadProcessMemory
LeaveCriticalSection
SetSystemTime
SetFileAttributesW
ProcessIdToSessionId
GetModuleFileNameA
GetTimeFormatA
CreateWaitableTimerA
CloseHandle
GetModuleFileNameW
InterlockedCompareExchange
Heap32First
GlobalHandle
CreateSemaphoreW
GlobalReAlloc
lstrcmpA
SetMailslotInfo
EnumUILanguagesW
GetVersionExA
MultiByteToWideChar
QueryPerformanceCounter
BeginUpdateResourceA
GetVolumePathNameW
FlushConsoleInputBuffer
SetFilePointer
SetConsoleMode
ConnectNamedPipe
CompareStringW
GetTapeParameters
FindFirstChangeNotificationW
MoveFileExA
GetEnvironmentStrings
GetProcessVersion
FlushViewOfFile
WaitForSingleObject
GetProcessHeap
TerminateProcess
GetVolumeNameForVolumeMountPointA
LocalCompact
SetFilePointerEx
PeekNamedPipe
SetCommTimeouts
EnumCalendarInfoA
SetHandleCount
Process32Next
GetCommModemStatus
OpenEventA
Heap32ListNext
GetProfileSectionA
GetHandleInformation
GetTickCount
TransmitCommChar
SetErrorMode
SetProcessPriorityBoost
GetCommandLineW
GetDateFormatA
GetFileSize
FindResourceW
lstrcmpiW
GetPrivateProfileStructA
GetFullPathNameW
CreateEventW
PurgeComm
GetTempPathA
HeapCreate
SetProcessAffinityMask
GetFileAttributesW
FindFirstFileExW
FileTimeToLocalFileTime
OpenSemaphoreA
GlobalLock
CancelIo
GetLocaleInfoW
ClearCommBreak
BackupSeek
UnlockFile
GetComputerNameA
GetCommState
lstrcpynA
HeapValidate
SetupComm
FreeLibrary
SetCommConfig
LockResource
Heap32ListFirst
SetCommBreak
GetSystemTimeAsFileTime
WaitForMultipleObjects
GetProfileStringA
MoveFileA
HeapSize
GetSystemWindowsDirectoryA
lstrcmpiA
CreateProcessW
IsProcessorFeaturePresent
InterlockedExchange
Process32First
IsValidLocale
FileTimeToSystemTime
GetConsoleCP
FileTimeToDosDateTime
WaitNamedPipeA
SetVolumeMountPointA
SystemTimeToFileTime
GlobalFree
EndUpdateResourceW
FindFirstFileW
GetCurrentProcess
IsBadStringPtrA
FindResourceExW
AreFileApisANSI
GetVersion
GlobalAddAtomW
GetSystemTime
FlushInstructionCache
VirtualAllocEx
lstrlenW
GetStringTypeW
GetLogicalDriveStringsA
GetStartupInfoW
GetCPInfo
GetExitCodeProcess
GetSystemDefaultLangID
WaitForMultipleObjectsEx
MapViewOfFile
SetTapePosition
GetStdHandle
WaitCommEvent
Module32NextW
GetCompressedFileSizeW
_lcreat
_lwrite
ReadConsoleInputA
SetThreadContext
EnumSystemLocalesA
IsValidCodePage
RaiseException
GetTempFileNameW
Module32Next
SetThreadExecutionState
AddAtomW
SetNamedPipeHandleState
FreeEnvironmentStringsW
ReleaseSemaphore
BuildCommDCBA
CompareFileTime
IsDBCSLeadByteEx
DisableThreadLibraryCalls
GetNumberFormatW
EnumResourceTypesA
GetEnvironmentStringsW
VirtualAlloc
SetUnhandledExceptionFilter
GetFileTime
EndUpdateResourceA
ReadFile
lstrcmpW
OpenMutexA
DuplicateHandle
DefineDosDeviceA
LocalReAlloc
GetFileType
_llseek
ConvertDefaultLocale
GetFileInformationByHandle
GlobalFindAtomW
InitializeCriticalSection
WaitForDebugEvent
GetComputerNameW
GetVersionExW
VirtualQueryEx
LocalLock
SetCurrentDirectoryW
VirtualUnlock
Thread32Next
_hread
GetFileAttributesA
Module32FirstW
OutputDebugStringW
Module32First
FindResourceA
GetFileSizeEx
GetCurrentThreadId
SetLastError
DebugActiveProcess
GetProcessWorkingSetSize
VerLanguageNameA
GetBinaryTypeA
GetCommConfig
CreateToolhelp32Snapshot
GetLastError
LockFileEx
FlushFileBuffers
FindAtomW
GetDateFormatW
GetLocaleInfoA
GetThreadLocale
SetConsoleTitleW
LocalUnlock
GetWindowsDirectoryW
EnumLanguageGroupLocalesW
DeleteFileA
RtlUnwind
EnumSystemLanguageGroupsW
GetQueuedCompletionStatus
UpdateResourceA
SetEvent
QueryDosDeviceA
GetLongPathNameA
user32
IsCharLowerA
DestroyIcon
IsRectEmpty
EnableScrollBar
GetWindowTextW
IntersectRect
SetCursor
SetWindowContextHelpId
CharUpperBuffA
OpenWindowStationW
CallNextHookEx
EnumDisplayMonitors
CharToOemA
DispatchMessageW
wsprintfA
GetUserObjectInformationA
SetCursorPos
TrackPopupMenu
wsprintfW
CheckDlgButton
SetWindowPlacement
ValidateRect
GetProcessWindowStation
GetKeyboardState
SetClipboardData
SetWindowTextW
SendNotifyMessageA
SendMessageW
GetClipboardOwner
UnionRect
BroadcastSystemMessage
FreeDDElParam
TranslateAcceleratorW
SetMenuItemBitmaps
CloseDesktop
InSendMessage
InflateRect
GetLastActivePopup
ReleaseDC
IsWindowUnicode
SetDoubleClickTime
CreateCaret
DrawAnimatedRects
SwitchDesktop
GetClassLongA
DrawCaption
DdeCreateStringHandleW
GetTabbedTextExtentA
LoadIconW
GetKeyNameTextW
DdeQueryStringW
DdeNameService
LoadStringW
LoadIconA
CharNextW
GetMenuBarInfo
GetScrollInfo
GetNextDlgTabItem
GetClassInfoW
InsertMenuItemW
GetClassInfoA
FindWindowA
GetWindowTextA
GetCapture
LoadCursorW
CopyImage
DrawIcon
GetDlgItemInt
UnregisterClassW
GetFocus
SendDlgItemMessageW
CreateMenu
CharUpperA
GetDialogBaseUnits
GetKeyboardLayoutList
ScrollWindowEx
LoadImageA
RegisterClassExW
DialogBoxParamW
AttachThreadInput
WindowFromPoint
GetMenuState
TrackPopupMenuEx
DestroyAcceleratorTable
InvalidateRect
DestroyWindow
VkKeyScanA
DrawTextExA
DefWindowProcA
IsChild
GetDlgItem
GetKeyNameTextA
TileChildWindows
VkKeyScanExA
GetUserObjectSecurity
AnimateWindow
CloseWindowStation
PackDDElParam
UnregisterHotKey
TrackMouseEvent
CallMsgFilterA
EnumDisplaySettingsA
MonitorFromPoint
GetKeyboardLayout
RegisterHotKey
ModifyMenuW
EnableMenuItem
NotifyWinEvent
TileWindows
DdeFreeDataHandle
EnableWindow
SetRectEmpty
CharToOemBuffA
CheckMenuRadioItem
mouse_event
CreateWindowExW
SendMessageTimeoutW
ReleaseCapture
DrawFocusRect
CascadeWindows
DdePostAdvise
CreateIconFromResourceEx
SetMenuInfo
OpenWindowStationA
GetAncestor
DrawMenuBar
SetUserObjectSecurity
GetClassNameA
RegisterDeviceNotificationW
SetActiveWindow
CharNextExA
CheckRadioButton
SetPropW
CopyAcceleratorTableW
UnpackDDElParam
TabbedTextOutW
IsWindowVisible
RegisterWindowMessageW
OpenDesktopA
LoadMenuW
DdeFreeStringHandle
LookupIconIdFromDirectoryEx
CharLowerW
SystemParametersInfoW
TranslateAcceleratorA
DdeQueryStringA
DrawStateW
EndDialog
RemoveMenu
RegisterClipboardFormatW
RealChildWindowFromPoint
wvsprintfW
GetWindowLongA
GetClipboardViewer
LoadMenuA
GetMenuInfo
GetMessageExtraInfo
GetClipboardFormatNameW
GetUpdateRgn
CharUpperBuffW
EmptyClipboard
ModifyMenuA
GetClassWord
RemovePropW
SetPropA
CreateDialogIndirectParamA
GetDlgCtrlID
DefMDIChildProcW
FillRect
DdeAccessData
LoadMenuIndirectW
LoadBitmapW
SetDlgItemTextW
CharNextA
FindWindowExW
RegisterClassExA
GetMenuItemID
RegisterClipboardFormatA
GetMessageTime
GetDesktopWindow
GetMonitorInfoA
DdeConnect
SetWindowsHookExA
ToUnicode
MoveWindow
SetWindowTextA
GetMonitorInfoW
ShowScrollBar
ScreenToClient
FrameRect
GetClipCursor
PostMessageW
GetWindowTextLengthW
DialogBoxIndirectParamA
IsDialogMessageA
DefDlgProcA
SetClassLongA
SetCaretPos
GetMessageA
UnhookWindowsHookEx
SetWindowRgn
RedrawWindow
LoadCursorA
ActivateKeyboardLayout
PeekMessageA
GetNextDlgGroupItem
SendDlgItemMessageA
UnregisterClassA
SetMenuItemInfoA
SetScrollInfo
GetMenuStringA
SystemParametersInfoA
DdeInitializeA
SetWindowLongW
SetScrollRange
MapVirtualKeyExA
DdeCreateDataHandle
GetWindowRect
LoadMenuIndirectA
OpenInputDesktop
wvsprintfA
CreateAcceleratorTableW
HiliteMenuItem
MonitorFromWindow
CreateMDIWindowW
CharLowerBuffW
GetSystemMetrics
CreatePopupMenu
GetScrollBarInfo
DrawTextW
BeginPaint
VkKeyScanW
GrayStringA
LoadKeyboardLayoutA
CopyIcon
DlgDirSelectExA
ScrollWindow
DestroyCaret
IsWindow
OemToCharA
SetMenuDefaultItem
GetClipboardData
SubtractRect
GetWindowContextHelpId
SetDlgItemInt
DialogBoxParamA
GetForegroundWindow
GetMenuStringW
MenuItemFromPoint
GetMenuContextHelpId
IsWindowEnabled
GetScrollRange
OpenClipboard
GetCursor
SetMenuContextHelpId
GetSubMenu
GetUserObjectInformationW
GetWindowLongW
SetMenu
TranslateMDISysAccel
PostMessageA
EnumThreadWindows
CloseWindow
IsDialogMessage
DdeUnaccessData
GetMenuItemInfoA
DrawStateA
GetThreadDesktop
SetClipboardViewer
InsertMenuW
SendNotifyMessageW
ToUnicodeEx
SetFocus
WinHelpW
CreateIconIndirect
SetForegroundWindow
IsCharAlphaNumericA
IsMenu
GetActiveWindow
IsDialogMessageW
GetCaretBlinkTime
MapWindowPoints
ShowOwnedPopups
OffsetRect
GetDCEx
EnumClipboardFormats
SetWindowPos
CopyAcceleratorTableA
MapVirtualKeyA
MessageBoxA
ExcludeUpdateRgn
CreateDesktopW
ToAsciiEx
SetCaretBlinkTime
GetClassInfoExA
SetRect
DlgDirSelectComboBoxExA
MsgWaitForMultipleObjects
GetPropW
GetTopWindow
GetCursorInfo
GetOpenClipboardWindow
GetMessageW
InsertMenuItemA
GetClientRect
ChildWindowFromPointEx
CreateIconFromResource
GetClassInfoExW
ValidateRgn
EnumChildWindows
PtInRect
GetAsyncKeyState
PeekMessageW
SendMessageTimeoutA
GetSysColorBrush
IsZoomed
MapVirtualKeyExW
ShowWindow
SendInput
CharPrevA
InsertMenuA
ChangeClipboardChain
IsIconic
DrawFrameControl
DdeDisconnect
CallWindowProcW
OpenDesktopW
DeleteMenu
ChangeDisplaySettingsA
GetGUIThreadInfo
DlgDirListComboBoxW
SetClassLongW
CountClipboardFormats
FlashWindow
LoadStringA
CheckMenuItem
MessageBoxIndirectA
EqualRect
LoadCursorFromFileW
ChangeDisplaySettingsW
SetThreadDesktop
CreateDialogParamW
GetCaretPos
ReuseDDElParam
KillTimer
ShowCursor
GetDC
DdeInitializeW
GetWindowPlacement
EnumDesktopWindows
GetWindowDC
IsCharAlphaA
FindWindowExA
GetDlgItemTextA
PostThreadMessageW
LoadCursorFromFileA
InvertRect
OemToCharBuffA
GetWindowWord
SendMessageA
LookupIconIdFromDirectory
GrayStringW
CharUpperW
CreateCursor
GetUpdateRect
SetWindowLongA
GetLastInputInfo
WindowFromDC
AllowSetForegroundWindow
GetDoubleClickTime
GetParent
SwapMouseButton
MapVirtualKeyW
GetMenuItemInfoW
DestroyCursor
DeferWindowPos
SetMenuItemInfoW
AdjustWindowRect
DrawEdge
GetSystemMenu
EndPaint
SetWindowsHookExW
DdeCreateStringHandleA
GetMessagePos
GetClassNameW
OpenIcon
CreateIcon
GetClassLongW
EnumDisplaySettingsW
PostQuitMessage
SetScrollPos
FindWindowW
WaitMessage
DdeClientTransaction
DragDetect
EndDeferWindowPos
ScrollDC
ShowCaret
DdeGetData
IsCharAlphaNumericW
DefFrameProcA
DrawTextA
TabbedTextOutA
SetDlgItemTextA
MonitorFromRect
GetMenuDefaultItem
DefWindowProcW
GetTitleBarInfo
MsgWaitForMultipleObjectsEx
LockWindowUpdate
UnregisterDeviceNotification
GetKeyboardLayoutNameA
RemovePropA
InvalidateRgn
GetMenu
GetKeyState
GetMenuItemCount
SetTimer
LoadImageW
UpdateWindow
WaitForInputIdle
GetWindowModuleFileNameW
GetDlgItemTextW
AppendMenuA
CharLowerA
TranslateMessage
BeginDeferWindowPos
LoadBitmapA
CloseClipboard
DefMDIChildProcA
GetQueueStatus
MapDialogRect
ToAscii
SetProcessWindowStation
GetSysColor
EnumWindows
ArrangeIconicWindows
DispatchMessageA
DlgDirListComboBoxA
GetWindowRgn
SetLayeredWindowAttributes
SetCapture
LoadAcceleratorsW
GetCursorPos
ShowWindowAsync
HideCaret
CreateDialogParamA
GetIconInfo
LoadAcceleratorsA
CreateAcceleratorTableA
GetWindowTextLengthA
UnhookWinEvent
DrawTextExW
DdeUninitialize
LockSetForegroundWindow
GetMenuCheckMarkDimensions
keybd_event
CreateWindowExA
BringWindowToTop
CharLowerBuffA
GetInputState
ClipCursor
GetMenuItemRect
CopyRect
MessageBoxW
GetClipboardFormatNameA
GetWindowInfo
ChildWindowFromPoint
AdjustWindowRectEx
DialogBoxIndirectParamW
RegisterWindowMessageA
ClientToScreen
DestroyMenu
GetWindowThreadProcessId
IsCharUpperA
DefFrameProcW
MessageBeep
MessageBoxExA
CreateDialogIndirectParamW
ReplyMessage
PostThreadMessageA
GetScrollPos
GetComboBoxInfo
CreateMDIWindowA
CallWindowProcA
FlashWindowEx
AppendMenuW
RegisterClassW
GetWindow
GetPropA
SetParent
IsCharLowerW
DlgDirListA
SetKeyboardState
DrawIconEx
SetMessageExtraInfo
DdeGetLastError
IsClipboardFormatAvailable
IsDlgButtonChecked
WinHelpA
comctl32
CreateStatusWindowW
ImageList_Duplicate
ImageList_AddIcon
ImageList_SetDragCursorImage
ImageList_Read
CreateUpDownControl
ImageList_GetImageCount
ImageList_Create
CreatePropertySheetPageW
ImageList_GetIcon
ImageList_EndDrag
ImageList_GetBkColor
ImageList_Replace
ImageList_Merge
ImageList_AddMasked
ImageList_DrawEx
MakeDragList
ImageList_GetImageInfo
ImageList_SetIconSize
CreatePropertySheetPageA
ImageList_Destroy
ImageList_DragShowNolock
ImageList_Copy
ImageList_SetImageCount
PropertySheetW
ImageList_Draw
ImageList_GetDragImage
InitializeFlatSB
ImageList_Add
ImageList_ReplaceIcon
ImageList_LoadImage
_TrackMouseEvent
ord17
DestroyPropertySheetPage
ImageList_DrawIndirect
ImageList_DragEnter
InitCommonControlsEx
ImageList_SetBkColor
ImageList_BeginDrag
ImageList_DragLeave
ImageList_Remove
ImageList_GetIconSize
FlatSB_ShowScrollBar
FlatSB_EnableScrollBar
PropertySheetA
ImageList_DragMove
ImageList_SetFlags
ImageList_Write
ImageList_SetOverlayImage
ImageList_LoadImageA
CreateToolbarEx
ImageList_LoadImageW
DrawStatusTextW
shell32
SHGetDesktopFolder
DuplicateIcon
DragQueryFileA
SHGetFolderPathA
Shell_NotifyIconA
SHGetSpecialFolderLocation
DragQueryPoint
SHGetSpecialFolderPathW
ShellExecuteExA
ExtractIconExW
DoEnvironmentSubstW
SHGetSpecialFolderPathA
SHGetDataFromIDListA
SHBrowseForFolderW
SHGetPathFromIDListA
SHGetFileInfoW
SHGetFolderLocation
SHCreateDirectoryExW
DragQueryFileW
SHAddToRecentDocs
FindExecutableW
CommandLineToArgvW
SHGetInstanceExplorer
SHBindToParent
SHFreeNameMappings
DragFinish
SHCreateDirectoryExA
ord155
ShellExecuteExW
SHFileOperationA
SHBrowseForFolderA
SHGetFolderPathW
SHGetMalloc
SHFileOperationW
ShellExecuteW
ExtractIconExA
SHGetDataFromIDListW
ExtractIconA
ShellExecuteA
SHGetPathFromIDListW
SHAppBarMessage
DragAcceptFiles
SHGetFileInfoA
FindExecutableA
SHChangeNotify
SHEmptyRecycleBinA
Shell_NotifyIconW
ExtractIconW
comdlg32
FindTextA
ChooseColorA
PageSetupDlgA
GetSaveFileNameW
PrintDlgExA
GetSaveFileNameA
PrintDlgW
PrintDlgA
ChooseFontA
GetOpenFileNameA
GetOpenFileNameW
ChooseColorW
GetFileTitleW
CommDlgExtendedError
PageSetupDlgW
GetFileTitleA
ReplaceTextA
ReplaceTextW
ChooseFontW
FindTextW
oleaut32
LoadTypeLi
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ